Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0c9f437972b80dcb4cd8c39fbbb0c7bf9b8082a7.cer
File:                     0c9f437972b80dcb4cd8c39fbbb0c7bf9b8082a7.cer (raw, json)
Hash identifier:          fjq7vne4ciLURG31coYchFJtFsdNerO41Vxbn6A3s94=
Subject key identifier:   3B:F3:63:60:C3:3C:91:77:89:0E:7A:04:F2:03:E2:58:32:88:40:7E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F169BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/91082096-4bc1-4d3a-b6fd-ae1fd57c2b5f/0c9f437972b80dcb4cd8c39fbbb0c7bf9b8082a7.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/91082096-4bc1-4d3a-b6fd-ae1fd57c2b5f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:32 +0000
Certificate not after:    Sun 11 Aug 2024 20:38:33 +0000
Subordinate resources:    AS: 265841
                          IP: 45.225.28.0/22
                          IP: 2803:1220::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15821245 (0xf169bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:32 2017 GMT
            Not After : Aug 11 20:38:33 2024 GMT
        Subject: CN=0c9f437972b80dcb4cd8c39fbbb0c7bf9b8082a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:dc:6c:7e:ae:c7:84:7c:f9:0e:ee:d2:0c:7c:
                    7f:8a:9a:81:45:1e:fa:16:ab:40:27:8f:b4:78:6e:
                    d0:3a:8a:ac:7f:53:5c:14:02:c0:88:d6:af:aa:17:
                    d8:71:cd:bc:b4:0a:9a:30:07:89:93:c4:cf:2c:98:
                    62:2d:51:b1:70:0f:6e:56:42:3a:22:30:e2:e7:69:
                    40:ff:c8:a5:4f:f2:bc:fe:df:39:a6:9d:ab:fd:5d:
                    fe:aa:ff:2f:e8:46:a4:cc:79:d6:43:f0:ad:11:f0:
                    ae:af:ec:68:fd:7e:38:11:90:4c:1f:3f:a0:c7:19:
                    d4:51:03:04:60:0e:63:72:b1:88:a2:12:fe:ca:91:
                    6c:1a:76:f6:19:cf:83:ed:ee:60:0b:b5:77:06:10:
                    85:64:22:c7:52:25:30:77:6e:1b:3a:d8:59:ec:e8:
                    56:21:13:55:9b:4e:08:71:b5:54:92:26:68:6f:02:
                    27:be:16:74:d2:32:4e:87:b8:25:6f:26:3e:b0:3a:
                    18:30:34:34:f6:3f:7a:ea:e3:b2:2e:4c:7d:b8:55:
                    c0:6e:ec:09:c2:1e:a8:d8:88:c6:b4:ad:9d:cc:45:
                    4b:db:cd:2b:16:ff:7b:84:65:fd:3e:6b:95:bb:92:
                    d0:68:8b:09:5d:55:ee:64:f8:bc:dc:3e:65:be:bf:
                    6e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:F3:63:60:C3:3C:91:77:89:0E:7A:04:F2:03:E2:58:32:88:40:7E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/91082096-4bc1-4d3a-b6fd-ae1fd57c2b5f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/91082096-4bc1-4d3a-b6fd-ae1fd57c2b5f/0c9f437972b80dcb4cd8c39fbbb0c7bf9b8082a7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.28.0/22
                IPv6:
                  2803:1220::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265841

    Signature Algorithm: sha256WithRSAEncryption
         3c:a1:92:d1:c8:3f:af:d6:69:88:f9:c3:6a:08:b9:a9:a7:94:
         67:d5:a1:bb:b4:76:bd:21:ec:84:ce:f8:ae:a5:29:f0:75:be:
         b1:f2:ce:7c:df:ee:09:71:f3:be:0a:93:3a:0a:97:f8:d4:e2:
         34:0b:4c:79:69:dc:fd:b1:c8:67:7c:b2:8c:ee:6d:2e:30:a6:
         fb:3a:37:5e:67:79:8e:59:f8:42:f9:5e:f9:f6:dd:65:57:4c:
         f4:b9:60:2e:d0:7e:41:e1:0c:fd:17:8e:f3:c6:32:c7:bd:16:
         09:7a:84:40:36:02:57:45:c2:a0:ed:5d:d8:31:3d:df:5a:b6:
         d7:f2:a7:a8:47:fe:f9:93:8c:74:8f:fc:4f:09:4f:a0:60:94:
         ae:cc:f5:44:46:a1:4b:5c:cb:28:b3:a6:ee:f4:9b:f6:c3:a7:
         a1:af:d9:86:a3:af:55:d5:cf:2a:0a:5a:12:f0:43:27:ce:cf:
         ab:a3:52:87:43:05:b2:d7:39:3d:e3:3e:db:11:cf:e3:f0:43:
         b8:0c:51:69:67:1e:98:d5:6b:f7:c8:be:4f:ba:fb:52:9d:3f:
         63:c6:35:56:75:47:1f:54:f5:ae:80:0d:07:8d:9a:20:e4:fc:
         09:90:f7:68:95:e8:0c:53:54:84:82:2a:7c:11:a1:f5:79:59:
         79:b5:4d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----